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Abstract 



Revision programming is a formalism to describe and enforce updates of belief sets and 
databases. That formalism was extended by Fitting who assigned annotations to revision 
atoms. Annotations provide a way to quantify the confidence (probability) that a revision 
atom holds. The main goal of our paper is to reexamine the work of Fitting, argue that 
his semantics does not always provide results consistent with intuition, and to propose 
.^^ an alternative treatment of annotated revision programs. Our approach differs from that 

proposed by Fitting in two key aspects: we change the notion of a model of a program 
q | and we change the notion of a justified revision. We show that under this new approach 

fundamental properties of justified revisions of standard revision programs extend to the 
annotated case. 
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1 Introduction 

Revision programming is a formalism to specify and enforce constraints on databases, belief 
sets and, more generally, on arbitrary sets. Revision programming was introduced and studied 
in [MT95, MT98J . The formalism was shown to be closely related to logic programming 

X 



with stable model semantics [MT98, PT97 |. In [ MPT99[| , a simple correspondence of revision 



programming with the general logic programming system of Lifschitz and Woo [LW92| was 
discovered. Roots of another recent formalism of dynamic logic programming [ ALP + 98 | can 
also be traced back to revision programming. 

(Unannotated) revision rules come in two forms of in-rules and out-rules: 

in(o) <- in(oi), ...,in(a m ),out(6i),... ,out(6 n ) (1) 

and 

out (a) <- in(ai),... ,in(a m ),out(&i), ... ,out(6 n ). (2) 

Expressions in(a) and out (a) are called revision atoms. Informally, the atom in(o) stands for 
"a is in the current set" and out (a) stands for "a is not in the current set." The rules (||) 
and (0) have the following interpretation: whenever all elements a,k, 1 < k < m, belong to the 



current set (database, belief set) and none of the elements bi, 1 < I < n, belongs to the current 
set then, in the case of rule (II]), the item a should be in the revised set, and in the case of rule 
(||), a should not be in the revised set. 

Let us illustrate the use of the revision rules by an example. 

Example 1.1 Let program P consist of the following two rules. 

in(6) <— out(c) and in(c) <— in(a),out(6). 

When the current set (initial database) has only atom a in it, there are two intended revisions. 
One of them consists of a and b. The other one consists of a and c. If, however, the initial 
database is empty, there is only one intended revision consisting of atom b. □ 

To provide a precise semantics to revision programs (collections of revision rules), the 
concept of a justified revision was introduced in | MT95| , JMT98 ]. Informally, given an initial 



set Bj and a revision program P, a justified revision of Bj with respect to P (or, simply, a 
P-justified revision of Bj) is obtained from Bj by adding some elements to Bj and by removing 
some other elements from Bj so that each change is, in a certain sense, justified. The intended 
revisions discussed in Example [O are P-justified revisions. 



The formalism of revision programs was extended by Fitting [Fit95] to the case when 
revision atoms occurring in rules are assigned annotations. Such annotation can be interpreted 
as the degree of confidence that a revision atom holds. For instance, an annotated atom 
(in(a):0.2) can be regarded as the statement that a is in the set with the probability 0.2. 
Thus, annotated atoms and annotated revision programs can be used to model situations 
when membership status of atoms (whether they are "in" or "out" ) is not precisely known and 
when constraints reflect this imprecise knowledge. In his work, Fitting defined the concept of 
an annotated revision program, described the concept of a justified revision of a database by 
an annotated revision program, and studied properties of that notion. 

The annotations do not have to be numeric. In fact they may come from any set. It is 
natural, though, to assume that the set of annotations has a mathematical structure of a com- 
plete distributive lattice. Such lattices allow us to capture within a single algebraic formalism 
different intuitions associated with annotations. For instance, annotations expressing probabil- 



ities [NS94J), possibilistic annotations [vE86|, and annotations in terms of opinions of groups 



of experts [ |Fit95 ] can all be regarded as elements of certain complete and distributive lattices. 
The general formalism of lattice-based annotations was studied by Kifer and Subrahmanian 
KS92] but only for logic programs without negations. 



In the setting of logic programs, an annotation describes the probability (or the degree of 
belief) that an atom is implied by a program or, that it is "in" a database. The closed world 
assumption then implies the probability that an atom is "out". Annotations in the context 
of revision programs provide us with richer descriptions of the status of atoms. Specifically, a 
possible interpretation of a pair of annotated revision literals (in(a) : a) and (out (a) : (5) is 
that our confidence in a being in a database is a and that, in the same time, our confidence 
that a does not belong to the database is (3. Annotating atoms with pairs of annotations allows 
us to model incomplete and contradictory information about the status of an atom. 

Thus, in annotated revision programming the status of an atom a is, in fact, given by 
a pair of annotations. Therefore, in this paper we will consider, in addition to a lattice of 



annotations, which we will denote by T, the product of T by itself — the lattice T 2 . There 
are two natural orderings on T 2 . We will use one of them, the knowledge ordering, to compare 
the degree of incompleteness (or degree of contradiction) of the pair of annotations describing 
the status of an atom. 

The main goal of our paper is to reexamine the work of Fitting, argue that his semantics 
does not always provide results consistent with intuition, and to propose an alternative treat- 
ment of annotated revision programs. Our approach differs from that proposed by Fitting in 
two key aspects: we use the concept of an s-model which is a refinement of the notion of a 
model of a program, and we change the notion of a justified revision. We show that under 
this new approach fundamental properties of justified revisions of standard revision programs 
extend to the case of annotated revision programs. 

Here is a short description of the content and the contributions of our paper. In Section 
[2|, we introduce annotated revision programs, provide some examples and discuss underlying 
motivations. We define the concepts of a valuation of a set of revision atoms in a lattice of 
annotations T and of a valuation of a set of (ordinary) atoms in the corresponding product 
lattice T 2 . We also define the knowledge ordering on T 2 and on valuations of atoms in T 2 . 

Given an annotated revision program, we introduce the notion of the operator associated 
with the program. This operator acts on valuations in T 2 and is analogous to the van Emden- 
Kowalski operator for logic programs [vEK76]. It is monotone with respect to the knowledge 



ordering and allows us to introduce the notion of the necessary change entailed by an annotated 
revision program. 

In Section y, we introduce one of the two main concepts of this paper, namely that of an 
s-model of a revision program. Models of annotated revision programs may be inconsistent. 
In the case of an s-model, if it is inconsistent, its inconsistencies are explicitly or implicitly 
supported by the program and the model itself. We contrast the notion of an s-model with 
that of a model. We show that in general the two concepts are different. However, we also 
show that under the assumption of consistency they coincide. 

In Section |3|, we define the notion of a justified revision of an annotated database by an 
annotated revision program P. Such revisions are referred to as P-justified revisions. They 
are defined so as to generalize justified revisions of [MT95, MT9§| ] . 



Justified revisions considered here are different from those introduced by Fitting in [Fit95|. 
We provide examples that show that Fitting's concept of a justified revision fails to satisfy some 
natural postulates and argue that our proposal more adequately models intuitions associated 
with annotated revision programs. In the same time, we provide a complete characterization 
of those lattices for which both proposals coincide. In particular, they coincide in the standard 
case of revision programs without annotations. 

We study the properties of justified revisions in Section ||. We show that annotated revision 
programs with the semantics of justified revisions generalize revision programming as intro- 



duced and studied in [ MT95| , MT98 |. Next, we show that P-justified revisions are s-models 



of the program P. Thus, the concept of an s-model introduced in Section g is an appropriate 
refinement of the notion of a model to be used in the studies of justified revisions. Further, 
we prove that P-justified revisions decrease inconsistency and, consequently, that a consistent 
model of a program P is its own unique P-justified revision. 

Throughout the paper we adhere to the syntax of annotated revision programs proposed by 
Fitting in [ Fit95| . This syntax stems naturally from the syntax of ordinary revision programs 



introduced in [MT95, MT9£| | and allows us to compare directly our approach with that of 



Fitting. However, in Section 0, we propose and study an alternative syntax for annotated 
revision programs. In this new syntax (ordinary) atoms are annotated by elements of the 
product lattice T 2 . Using this alternative syntax, we obtain an elegant generalization of the 



shifting theorem of fMPT99 |. 



In Section p], we provide a brief account of some miscellaneous results on annotated revision 
programs. In particular, we discuss the case of programs with disjunctions in the heads and 
the case when the lattice of annotations is not distributive. 

2 Preliminaries 

We will start with examples that illustrate main notions and a possible use of annotated 
revision programming. Formal definitions will follow. 

Example 2.1 A group of experts is about to discuss a certain proposal and then vote whether 
to accept or reject it. Each person has an opinion on the proposal that may be changed during 
the discussion as follows: 

- any person can convince an optimist to vote for the proposal, 

- any person can convince a pessimist to vote against the proposal. 

The group consists of two optimists (Ann and Bob) and one pessimist (Pete). We want to 
be able to answer the following question: given everybody's opinion on the subject before the 
discussion, what are the possible outcomes of the vote? 

Assume that before the vote Pete is for the proposal, Bob is against, and Ann is indifferent 
(has no arguments for and no arguments against the proposal). This situation can be described 
by assigning to atom "accept" the annotation {{Pete}, {Bob}), where the first element of the 
pair is the set of experts who have arguments for the acceptance of the proposal and the second 
element is the set of experts who have arguments against the proposal. In the formalism of 
annotated revision programs, as proposed by Fitting in [ |Fit95 ], this initial situation is described 



by a function that assigns to each atom in the language (in this example there is only one atom) 
its annotation. In our example, this function is given by: Bj(accept) = ({Pete}, {Bob}). (Let 
us mention here that in general, the sets of experts in an annotation need not to be disjoint. 
An expert may have arguments for and against the proposal at the same time. In such a case 
the expert is contradictory.) 

The ways in which opinions may change are described by the following annotated revision 
rules: 

(in(accept):{Ann}) <— (in(accept):{Bob}) 
(in(accept):{Ann}) <— (in(accept):{Pete}) 

(in(accept):{Bob}) <— (in(accept):{Ann}) 
(in(accept):{Bob}) <— (in(accept):{Pete}) 

(out(accept):{Pete}) <— (out (accept):{ Ann}) 

(out(accept):{Pete}) <— (out (accept):{Bob}) 



The first rule means that if Bob accepts the proposal, then Ann should accept the proposal, too, 
since she will be convinced by Bob. Similarly, the second rule means that if Pete has arguments 
for the proposal, then he will be able to convince Ann. These two rules describe Ann being an 
optimist. The remaining rules follow as Bob is an optimist and Pete is a pessimist. 

Possible outcomes of the vote are given by justified revisions. In this particular case there 
are two justified revisions of the initial database Bj. They are B^accept) = {{Ann, Bob, Pete}, 
{}) and B' R (accept) = ({}, {Bob, Pete}}. The first one corresponds to the case when the pro- 
posal is accepted (Ann, Bob and Pete all voted for). This outcome happens if Pete convinces 
Bob and Ann to vote for. The second revision corresponds to the case when Bob and Pete 
voted against the proposal (Ann remained indifferent and did not vote). This outcome happens 
if Bob convinces Pete to change his opinion. □ 



Remark 2.2 It is possible to rewrite annotated revision rules from Example 2.1 as ordi- 
nary revision rules (without annotations) if we use atoms "accept-Ann ", "accept-Bob ", and 
"accept_Pete ". However, ordinary revision programs do not deal with inconsistent or not com- 
pletely defined databases. In particular, we will not be able to express the fact that initially 



Ann has no arguments for and no arguments against the proposal in Example 2.1. 



In the next example annotations are real numbers from the interval [0, 1] representing 
different degrees of a particular quality. 

Example 2.3 Assume that there are two sources of light: a and b. Each of them may be 
either On or Off. They are used to transmit two signals. The first signal is a combination of a 
being On and b being Off. The second signal is a combination of a being Off and b being On. 

The sources a and b are located far from an observer. Such factors as light pollution 
and dust may affect the perception of signals. Therefore, the observed brightness of a light 
source differs from its actual brightness. Assume that brightness is measured on a scale from 
(complete darkness) to 1 (maximal brightness). The actual brightness of a light source may 
be either (when it is Off), or 1 (when it is On). 

Initial database Bi represents observed brightness of sources. For example, if observed 
brightness of source a is a (0 < a < 1), then Bj(a) = (a, 1 — a). We may think of the first and 
the second elements in the pair {a, 1 — a) as degrees of brightness and darkness of the source 
respectfully. The task is to infer actual brightness from observed brightness. Thus, revision of 
the initial database should represent actual brightness of sources. 

Suppose we know that dust in the air cannot reduce brightness by more than 0.2. Then, 
we can safely assume that a light source is On if its observed brightness is 0.8 or more. Assume 
also that light pollution cannot contribute more than 0.4. That is, if observed darkness of a 
source is at least 0.6, it must be Off. This information together with the fact that only two 
signals are possible, may be represented by the following annotated revision program P: 

(in(a):l) «- (in(a):0.8), (out(6):0.6) 

(out(6):l) <- (in(a):0.8),(out(6):0.6) 

(in(6):l) <- (in(6):0.8), (out(a):0.6) 

(out(a):l) «- (in(6):0.8),(out(a):0.6) 



The first two rules state that if the brightness of a is at least 0.8 and darkness of b is at 
least 0.6, then brightness of a is 1 (the first rule) and darkness of b is 1 (the second rule). 
This corresponds to the case when the first signal is transmitted. Similarly, the last two rules 
describe the case when the second signal is transmitted. 

Let observed brightness of a and b be 0.3 and 0.9 respectively. That is, Bj[a) = (0.3,0.7) 
and Bj(b) = (0.9,0.1). Then, P-justified revision of Bj is the actual brightness. In this case 
we have B R (a) = (0, 1) (a is Off), and B R (b) = (1, 0) (b is On). □ 

Now let us move on to formal definitions. Throughout the paper we consider a fixed universe 



U whose elements are referred to as atoms. In Example 2.1 U = {accept}. In Example 2.3 
U = {a, b}. Expressions of the form in(a) and out (a), where a € U, are called revision atoms. 
In the paper we assign annotations to revision atoms. These annotations are members of 
a complete infinitely distributive lattice with the De Morgan complement (an order reversing 
involution). Throughout the paper this lattice is denoted by T. The partial ordering on T is 
denoted by < and the corresponding meet and join operations by A and V, respectively. The 
De Morgan complement of a E T is denoted by a. Let us recall that it satisfies the following 
two laws (the De Morgan laws): 



a V b = a A 6, a A 6 = a V 6. 

In Example [O], T is the set of subsets of the set {Ann, Bob, Pete}, with C as the ordering 



relation, and the set-theoretic complement as the De Morgan complement. In Example 2.3, 
T = [0, 1] with the usual ordering; the De Morgan complement of a is 1 — a. 

An annotated revision atom is an expression of the form (in(a):a) or (out (a): a), where 
a£(7 and a S T. An annotated revision rule is an expression of the form 

p<- qi,...,q n , 

where p, q\, . . . ,q n are annotated revision atoms. An annotated revision program is a set of 
annotated revision rules. 

A T -valuation is a mapping from the set of revision atoms to T. A T- valuation v describes 
our information about the membership of the elements from U in some (possibly unknown) 
set B QU. For instance, v(in(a)) = a can be interpreted as saying that a £ B with certainty 
a. A T-valuation v satisfies an annotated revision atom (in(a):a) if t>(in(a)) > a. Similarly, 
v satisfies (out (a):a) if v (out(a)) > a. The T-valuation v satisfies a list or a set of annotated 
revision atoms if it satisfies each member of the list or the set. A T-valuation satisfies an 
annotated revision rule if it satisfies the head of the rule whenever it satisfies the body of the 
rule. Finally, a T-valuation satisfies an annotated revision program (is a model of the program) 
if it satisfies all rules in the program. 

Given an annotated revision program P we can assign to it an operator on the set of all 
T- valuations. Let tp(v) be the set of the heads of all rules in P whose bodies are satisfied by 
a T-valuation v. We define an operator Tp as follows: 

T P (v)(l) = \J{ a \(l:a)etp(v)} 

Here V X is the join of the subset X of the lattice (note that _L is the join of an empty set 
of lattice elements). The operator Tp is a counterpart of the well-known van Emden-Kowalski 
operator from logic programming and it will play an important role in our paper. 



It is clear that under T-valuations, the information about an element a £ U is given by a 
pair of elements from T that are assigned to revision atoms in(a) and out (a). Thus, in the 
paper we will also consider an algebraic structure T 2 with the domain T x T and with an 
ordering <& defined by: 

(ai,fh) <k («2,/32) if a\ < a 2 and (h < (3 2 . 

If a pair (ai,/?i) is viewed as a measure of our information about membership of a in some 
unknown set B then ax < 02 and /?i < /?2 imply that the pair (0*2, P2) represents higher 
degree of knowledge about a. Thus, the ordering <k is often referred to as the knowledge 
or information ordering. Since the lattice T is complete and distributive, T 2 is a complete 
distributive lattice with respect to the ordering <&[]. 

The operations of meet, join, top, and bottom under < fc are denoted ©, ©, T, and _L, 
respectively. In addition, we make use of the conflation operation. Conflation is defined as 
—{a,,j3) = ((3, a). An element A € T 2 is consistent if A <& —A. In other words, an element 
(a, (3) € T 2 is consistent if a is smaller than or equal to the complement of (3 (the evidence 
"for" is less than or equal than the complement of the evidence "against") and (3 is smaller 
than or equal to the complement of a (the evidence "against" is less than or equal than the 
complement of the evidence "for" ) . 

The conflation operation satisfies the De Morgan laws: 

-({a, (3) © ( 7 ,5)) = -(a, 13) ® -(7, 5), 

-({a, (3) © (7,5)) = -(a, (3) © -(7, 5), 

where a, /3, 7, S £ T. 

A 7~ 2 -valuation is a mapping from atoms to elements of T 2 . If B(a) = (a, (3) under some 
T 2 -valuation B, we say that under B the element a is in a set with certainty a and it is not 
in the set with certainty (3. We say that a T 2 -valuation is consistent if it assigns a consistent 
element of T 2 to every atom in U. 

In this paper, T 2 -valuations will be used to represent current information about sets 
(databases) as well as the change that needs to be enforced. Let B be a T 2 -valuation repre- 
senting our knowledge about a certain set and let C be a 7" 2 -valuation representing change 
that needs to be applied to B. We define the revision of B by C, say B', by 

B' = {B® -C) © C. 

The intuition is as follows. After the revision, the new valuation must contain at least as much 
knowledge about atoms being in and out as C. On the other hand, this amount of knowledge 
must not exceed implicit bounds present in C and expressed by — C, unless C directly implies 
so. In other words, if C(a) = (a,/3), then evidence for in(a) must not exceed f3 unless a> J3, 
and the evidence for out (a) must not exceed a unless (3 > a. Since we prefer explicit evidence 
of C to implicit evidence expressed by — C, we perform the change by first using —C and then 



1 There is another ordering that can be associated with T 2 . We can define (ai,0i) <t (02, P2) if cei < 012 
and /3i > fa. This ordering is often called the truth ordering. Since T is a comp l ete di stributive lattice, T 2 



with both orderings <k and <t forms a complete distributive bilattice (see Gin8£ , PitOO for a definition). In 
this paper we will not use the ordering < t nor the fact that T 2 is a bilattice. 



applying C. However, let us note here that the order matters only if C is inconsistent; if C is 
consistent, (B © —C) © C = (B © C) <8> —C. This specification of how the change modeled by 
a 7~ 2 -valuation is enforced plays a key role in our definition of justified revisions in Section ||. 

Example 2.4 (continuation of Example |2.1[ ) In Example |2.1| , Bj has two revisions. The 
first one, Br, is the revision of Bj by C, where C (accept) = ({Ann, Bob}, {}). We have 
-C(accept) = ({Ann, Bob, Pete}, {Pete}). Thus, (Bj^-C) (accept) = {{Pete},®), and ((£/© 
-C) © C)(accept) = ({Ann, Bob, Pete},®) = B R (accept). 

The second revision, B^, is the revision of Bi by C", where C (accept) = {{}, {Pete}). □ 

There is a one-to-one correspondence 9 between T-valuations (of revision atoms) and T 2 - 
valuations (of atoms). For a T- valuation v, the T 2 -valuation 9(v) is defined by: 6(v)(a) = 
(v(in(a)),v(out(a))). The inverse mapping of 9 is denoted by 6~ 1 . Clearly, by using the 
mapping 9, the notions of satisfaction defined earlier for T- valuations can be extended to T 2 - 
valuations. Similarly, the operator Tp gives rise to a related operator Tp. The operator T p is 
defined on the set of all T 2 -valuations by Tp = 9 o Tp o 9~ 1 . The key property of the operator 
Tp is its <fc-monotonicity. 

Theorem 2.5 Let P be an annotated revision program and let B and B' be two T 2 -valuations 
such that B < k B' . Then, T P (B) < k Tp(B'). 



By Tarski-Knaster Theorem | Tar56| it follows that the operator Tp has a least fixpoint in 



T 2 (see also [ KS92fl ). This fixpoint is an analogue of the concept of a least Herbrand model 



of a Horn program. It represents the set of annotated revision atoms that are implied by 
the program and, hence, must be satisfied by any revision under P of any initial valuation. 
Given an annotated revision program P we will refer to the least fixpoint of the operator 
T P as the necessary change of P and will denote it by NC(P). The present concept of the 



necessary change generalizes the corresponding notion introduced in [MT95, MT98] for the 
original unannotated revision programs. 

To illustrate concepts and results of the paper, we will consider two special lattices. The 
first of them is the lattice with the domain [0, 1] (interval of reals), with the standard ordering 
<, and the standard complement operation a = 1 — a. We will denote this lattice by ^[o,ll- 
Intuitively, the annotated revision atom (in(a):x), where x 6 [0,1], stands for the statement 
that a is "in" with likelihood (certainty) x. 

The second lattice is the Boolean algebra of all subsets of a given set X. It will be denoted 
by 73c. We will think of elements from X as experts. The annotated revision atom (out (a):Y), 
where Y C X, will be understood as saying that a is believed to be "out" by those experts 
that are in Y (the atom (in(a):Y) has a similar meaning). 

3 Models and s-models 

The semantics of annotated revision programs will be based on the notion of a model, as 
defined in the previous section, and on its refinements. The first two results describe some 
simple properties of models of annotated revision programs. The first of them characterizes 
models in terms of the operator Tp. 



Theorem 3.1 Let P be an annotated revision program. A 7~ 2 -valuation B is a model of P 
(satisfies P) if and only if B > k T P {B). 

Models of annotated revision programs are closed under meets. This property is analogous 
to a similar property holding for models of Horn programs. Indeed, since B\ ® B2 < k Bi, 



i = 1,2, and T P is <fc-monotone, by Theorem 3A we obtain 

T b P (B 1 ® B 2 ) < k T b P {Bi) < k B h i = 1, 2. 

Consequently, 

T b P {B l ®B 2 ) < k B l ®B 2 . 



Thus, again by Theorem 3.1 we obtain the following result. 



Corollary 3.2 The meet of two models of an annotated revision program P is also a model 
ofP. 

Given an annotated revision program P, its necessary change NC(P) satisfies NC(P) = 
T P (NC(P)). Hence, NC{P) is a model of P. 

As we will now argue, not all models are appropriate for describing the meaning of an 
annotated revision program. The problem is that T 2 -valuations may contain inconsistent 
information about elements from U. When studying the meaning of an annotated revision 
program we will be interested in those models only whose inconsistencies are limited to those 
explicitly or implicitly supported by the program and by the model itself. 

Consider the program P = {(in(a) :{(/}) ^} (where the annotation {q} comes from the 
lattice T{ pq j). This program asserts that a is "in", according to expert q. By closed world 
assumption, it also implies an upper bound for the evidence for out (a). In this case the only 
expert that might possibly believe in out (a) is p (this is to say that expert q does not believe 
in out(a)). Observe that a T 2 -valuation B, such that B(a) = ({q}, {q}} is a model of P but 
it does not satisfy the implicit bound on evidence for out (a). 

Let P be an annotated program and let B be a T 2 -valuation that is a model of P. By 
the explicit evidence we mean evidence provided by heads of program rules applicable with 
respect to B, that is with bodies satisfied by B. It is T P (B). The implicit information is given 
by a version of the closed world assumption: if the maximum evidence for a revision atom 
I provided by the program is a then, the evidence for the dual revision atom I (out (a), if 
I = in(a), or in(a), otherwise) must not exceed a (unless explicitly forced by the program). 
Thus, the implicit evidence is given by —T P (B). Hence, a model B of a program P contains 
no more evidence than what is directly implied by P given B and what is indirectly implied 
by P given B if B < k T P (B) © (-Tp(B)) (since the direct evidence is given by T P {B) and the 
implicit evidence is given by —T P {B)). This observation leads us to a refinement of the notion 
of a model of an annotated revision program. 

Definition 3.3 Let P be an annotated revision program and let B be a T 2 -valuation. We say 
that B is an s-model of P if 

T b P (B) < k B < k T b P (B) © (-T b P (B)). 



The "s" in the term "s-model" stands for "supported" and emphasizes that inconsistencies 
in s-models are limited to those explicitly or implicitly supported by the program and the 
model itself. 



Clearly, by Theorem 3.1, an s-model of P is a model of P. In addition, it is easy to see 
that the necessary change of an annotated program P is an s-model of P (it follows directly 
from the fact that NC{P) = T P {NC(P))). 

The distinction between models and s-models appears only in the context of inconsistent 
information. This observation is formally stated below. 

Theorem 3.4 Let P be an annotated revision program. A consistent T 2 -valuation B is an 
s-model of P if and only if B is a model of P. 

Proof. (=►) Let B be an s-model of P. Then, T b P {B) < k B < k T b P {B) © (-T P (B)). In 
particular, T P {B) < k B and, by Theorem 3A, B is a model of P. 



(<=) Let B satisfy P. From Theorem |3T| we have T p (B) < k B. Hence, -B < k -T p (B). Since 
B is consistent, B < k —B. Therefore, 

1p(B) <k B < k -B < k -T b P (B). (3) 

It follows that T P (B) < k -T P {B) and T P (B) © (-Tp(B)) = -T P (B). By (|), we get 

T P (B) < k B < k T b P (B) © {-T b P (B)) 

and the assertion follows. □ 

Some of the properties of ordinary models hold for s-models, too. For instance, the following 

theorem shows that an s-model of two annotated revision programs is an s-model of their union. 

Theorem 3.5 Let P\, P<i be annotated revision programs. Let B be an s-model of P\ and an 
s-model of ?2- Then, B is an s-model of P\ Ui-2- 

Proof. Clearly, B is a model of P\ U Pi- That is, 

T b PlUP2 (B)< k B. (4) 

It is easy to see that 

T b PlUP2 (B) = T b Pi (B)(BT b P2 (B). (5) 

Hence, by the De Morgan law, 

" T b PlUP2 (B) = -T b Pi (B) ® -T b P2 (B). (6) 

It follows from the definition of an s-model that 

B< k T b Pi (B)®-T b Pi (B), and 

B< k T b P2 (B)@-T b P2 (B). 

Thus, 

B < k (T b Pl (B) © -T b Pi (B)) ® {T b P2 {B) © -2*,(fl)). 
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By the distributivity of lattice operations in T 2 , we obtain 

B < k (T b Pi (B) ® (T b P2 (B) © -T b P2 (B))) © (-T b Pl (B) ® (!*,(£) -I%,(B))). 

The first summand is smaller or equal to T p (B). Thus, by applying distributivity to the 
second summand, we get the following inequality: 

B < k T b Pi (B) © (-T b Pi (B) ® 1%(B)) © (-T b Pi (B) ® -T|> 2 (B)). 

Using -T b Pi {B) © T^(5) < fe 1^,(5) and then (|) and (§), we get 

P <k T b Pl (B) © I*,(S) © -T b PlUP2 (B) = T b PlUP2 (B) © -2^(1?). 

In other words, 

B< k T b PiUP2 (B)e-T b PlUP2 (B). (7) 

From (Q) and (|7|) it follows that B is an s- model of Pi U Pi . □ 

Not all of the properties of models hold for s-models. For instance, the counterpart of 
Corollary |3.2| does not hold. The following example shows that the meet of two s-models is 
not necessarily an s-model. 

Example 3.6 Consider the lattice Ti p „\. Let P be an annotated program consisting of the 
following rules: 

(in(o):{p}) - (in(&):{p» 

(out(a):{p}) <- 

(in(o):{p» «- (out(6):{p» 

Let i?i and P 2 be defined as follows. 

Bi(a) = ({p},{P». Bi(6) = (W,0); 

P 2 (a) = (M,M), P 2 (6) = (Mp}>- 
Let us show that B\ is an s-model of P. Indeed, 

T b P {B x ){a) = (M,M), I^(Bi)(6) = (0,0). 



Hence, 
Therefore, 



-2*(iJi)(a) = <{<?}, {?}), -^(Si)(6) = ({P,g},feg}}. 

T b P {B x ){a) < k Pi (a) < fc (T£(Pi) © -T^(P 1 ))(a), and 

TpiBjib) < k Pi (6) < fc (T|,(Pi) © -T|,(Pi))(6). 

In other words, Pi is an s-model of P. Similarly, P 2 is an s-model of P. However, Pi © P 2 is 
no£ an s-model of P. Indeed, 

(Pi © B 2 ){a) = ({p}, {p}), (Pi © P 2 )(6) = (0, 0). 
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Then, 



Hence, 



T P (B 1 ® B 2 )(a) = (0, {p}), I* (S! ® B 2 )(6) = (0, 0), and 

-T b P {Bi®B 2 ){a) = ({q},{p,q}), -T b P {B 1 ® B 2 )(b) = ({p,q},{P,Q})- 



(B 1 ® B 2 )(a) £ fc (3^(Bi ® B 2 ) © -7p(#i (2) B 2 ))(a) = (M, {p, g}}. 
Therefore, Si ® P 2 is not an s-model of P. □ 

In this example both B\ and B 2 , as well as their meet B\ ® B 2 are inconsistent. For B\ 
and P 2 there are rules in P that explicitly imply their inconsistencies. However, for B\ ® P 2 
the bodies of these rules are no longer satisfied. Consequently, the inconsistency in B\ ® B 2 is 
not implied by P. That is, B\ ® B 2 is not an s-model of P. 

Let us now investigate what happens when we add to an annotated revision program P 
a rule r = (1: a) <— (I: a) (here I is a revision atom, a is an annotation). Unlike ordinary 
revision programs where every database is a model of a rule of the form I <— I, not every 
T 2 -valuation is an s-model of r. Therefore, adding such a rule may affect the set of s-models of 
the program. On the one hand, rule r by imposing additional implicit bound on l D may give 
rise to a situation when an s-model of P is not an an s-model of P U {r} (Case 1 of Example 
|3.7| ). On the other hand, rule r may provide additional explicit evidence for I that results in a 
situation when an s-model of P U {r} is not an s-model of P (Case 2 of Example |3.7|). 



Example 3.7 Let U = {a} and the lattice of annotations be T{ Ptq }- Let B(a) = {{p},{p})- 
Let r = (in(a):{p}) <— (in(a):{p}) . 

1. Let P = {}. Then, T P (B)(a) = (0,0), and -T P {B){a) = ({p,q}, {p,q}). Hence, 
T P (B)(a) < B(a) < T P (B)(a) V (-T P (B))(a). Thus, B is an s-model of P. However, 
B is not an s-model of PU {r}. Indeed, T P{J{r} (B)(a) = ({p},0), and -Tj, u{r} (£)(a) = 
({p,g},M). Hence, B(a) £ T b pu{r} (B)(a) V (-T^ u{r} (P))(a) = ({p, q}, {q}). Therefore, 
B is noi an s-model of P U {r}. 

2. Let P = { (out(a):{p}) <— }. Then it is easy to see that B is not an s-model of P. 
However, B is an s-model of P U {r}. □ 



Remark 3.8 Let us note that adding rule r = (l:a) <— (I'oi) to P has no effect on consistent 
models of P. Indeed, let B be a consistent model of P. Clearly, B is a model of {r}. Hence, 



by Theorem 3J^, B is an s-model of P, and an s-model of {r}. Therefore, Theorem \3. o\ implies 



that B is an s-model of P U {r}. 

4 Justified revisions 

In this section, we will extend to the case of annotated revision programs the notion of a justified 
revision introduced for revision programs in [MT95]. The reader is referred to [ MT95| . MT98| 



for the discussion of motivation and intuitions behind the concept of a justified revision and 
of the role of the inertia principle (a version of the closed world assumption). 



12 



There are several properties that one would expect to hold when the notion of justified 
revision is extended to the case of programs with annotations. Clearly, the extended concept 
should specialize to the original definition if annotations are dropped. Next, main properties 
of justified revisions studied in [MT98, MPT99| | should have their counterparts in the case of 



justified revisions of annotated programs. In particular, justified revisions of an annotated 
revision program should be models of the program. 

There is one other requirement that naturally arises in the context of programs with anno- 
tations. Consider two annotated revision rules r and r' that are exactly the same except that 
the body of r contains two annotated revision atoms (Z:ft) and (Z:ft), while the body of r' 
instead of (Z:ft) and (Z:ft) contains annotated revision atom (Z:ft V ft). 

r= ...^...,(Z:/3 1 ),...,(Z:/3 2 ),... 

r'= ...<-..., (fcftV ft),... 

We will refer to this operation as the join transformation. 

It is clear, that a T 2 -valuation B satisfies (Z:ft) and (Z : ft) if and only if B satisfies 
(Z:ft V ft). Consequently, replacing rule r by rule r' (or vice versa) in an annotated revision 
program should have no effect on justified revisions. In fact, any reasonable semantics for 
annotated revision programs should be invariant under such operation, and we will refer to 
this property of a semantics of annotated revision programs as invariance under join. 

Now we introduce the notion of a justified revision of an annotated revision program and 



contrast it with an earlier proposal by Fitting [Fit95]. In the following section we show that 
our concept of a justified revision satisfies all the requirements listed above. 

Let a T 2 -valuation Bj represent our current knowledge about some subset of the universe 
U. Let an annotated revision program P describe an update that Bj should be subject to. 
The goal is to identify a class of T 2 -valuations that could be viewed as representing updated 



information about the subset, obtained by revising Bj by P. As argued in [MT95, MT98 |, each 
appropriately "revised" valuation Br must be grounded in P and in Bj, that is, any difference 
between Bj and the revised T 2 -valuation Br must be justified by means of the program and 
the information available in Bj. 

To determine whether Br is grounded in Bj and P, we use the reduct of P with respect 
to these two valuations. The construction of the reduct consists of two steps and mirrors the 



original definition of the reduct of an unannotated revision program JMT98]. In the first step, 



we eliminate from P all rules whose bodies are not satisfied by Br (their use does not have 
an a posteriori justification with respect to Br). In the second step, we take into account the 
initial valuation Bj. 

How can we use the information about the initial T 2 -valuation Bj at this stage? Assume 
that Bj provides evidence a for a revision atom I. Assume also that an annotated revision 
atom (/:/?) appears in the body of a rule r. In order to satisfy this premise of the rule, it is 
enough to derive, from the program resulting from step 1, an annotated revision atom (l:j), 
where a V 7 > (3. The least such element exists (due to the fact that T is complete and 
infinitely distributive). Let us denote this value by pcomp(a, /3)q 

Thus, in order to incorporate information about a revision atom / contained in the initial 
T 2 -valuation Bj, which is given by a = (9~ 1 (Bj))(l), we proceed as follows. In the bodies 



J The operation pcomp(-, ■) is known in the lattice theory as the relative pseudocomplement, see [RS7C] 
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of rules of the program obtained after step 1, we replace each annotated revision atom of the 
form (l:/3) by the annotated revision atom [l:pcomp(a, /?)). 

Now we are ready to formally introduce the notion of reduct of an annotated revision 
program P with respect to the pair of T 2 -valuations, initial one, Bj, and a candidate for a 
revised one, Br. 

Definition 4.1 The reduct Pb r \Bj is obtained from P by 

1. removing every rule whose body contains an annotated atom that is not satisfied in Br, 

2. replacing each annotated atom {l:(3) from the body of each remaining rule by the annotated 
atom (h"f), where 7 = pcomp{{9^ 1 {Bi)){l),(5). 

We now define the concept of a justified revision. Given an annotated revision program P, 
we first compute the reduct Pb r \Bj of the program P with respect to Bj and Br. Next, we 
compute the necessary change for the reduced program. Finally we apply this change to the 
T 2 -valuation Bj. A T 2 -valuation Br is a justified revision of Bj if the result of these three 
steps is Br. Thus we have the following definition. 

Definition 4.2 Br is a P-justified revision of B[ if Br = (Bj ® —C) C , where C = 
NC(Pb r \Bj) is the necessary change for Pr r \Bi. 



We will now contrast this approach with the one proposed by Fitting in [Fit95]. In order to 



do so, we recall the definitions introduced in [Fit95]. The key difference is in the way Fitting 



defines the reduct of a program. The first step is the same in both approaches. However, 
the second steps, in which the initial valuation is used to simplify the bodies of the rules not 
eliminated in the first step of the construction, differ. 

Definition 4.3 (Fitting) Let P be an annotated revision program and let Bj and Br be 

T 2 -valuations. The F-reduct of P with respect to (Bj,Br) (denoted Pg \Bj) is defined as 
follows: 

1. Remove from P every rule whose body contains an annotated revision atom that is not 
satisfied in Br. 

2. From the body of each remaining rule delete any annotated revision atom that is satisfied 
in Bj. 

The notion of justified revision as defined by Fitting differs from our notion only in that 
it uses the necessary change of the F-reduct (instead of the necessary change of the reduct 
defined above in Definition |4.1| ), We call the justified revision based on the notion of F-reduct, 
the F -justified revision. 

In the remainder of this section we show that the notion of the F-justified revision does 
not in general satisfy some basic requirements that we would like justified revisions to have. In 
particular, F-justified revisions under an annotated revision program P are not always models 
of P. 
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Example 4.4 Consider the lattice Ts pq \. Let P be a program consisting of the following rules: 

(in(o):{p» <- (in(6):{p, g}) and (in(6):{g» <- 

and let 5/ be a valuation such that Bj(a) = (0, 0) and Bj(b) = ({p}, 0). Let -Br be a valuation 
given by B R (a) = (0, 0} and B R {b) = {{p, q}, 0). Clearly, PbJBi = P, and B R is an F-justified 
revision of Bj (under P). However, B R does not satisfy P. □ 

The semantics of F-justified revisions also fails to satisfy the invariance under join property. 

Example 4.5 Let P be the same revision program as before, and let P' consist of the rules 

(in(o):{p}) «- M^M), (in(6):{?}) and (in(6):{g}) <- 

Let the initial valuation Bi be given by Bj{a) = (0,0) and Bj{b) = ({p},0}. The only F- 
justified revision of Bj (under P) is a 7" 2 -valuation B R , where B R (a) = (0,0) and B R (b) = 
({p, q}, 0). The only F-justified revision of Bi (under P') is a T 2 -valuation B' R , where B R (a) = 
({p},0) and B' R (b) = ({p, g},0). Thus, replacing in the body of a rule (in(6) : {p, q}) by 
(in(b):{p}) and (in(6):{g , |) affects F-justified revisions. □ 

However, in some cases the two definitions of justified revision coincide. The following 
theorem provides a complete characterization of those cases (let us recall that a lattice T is 
linear if for any two elements a, (3 £ T either a < (3 or /3 < a). 

Theorem 4.6 F -justified revisions and justified revisions coincide if and only if the lattice T 
is linear. 

Proof. (=>) Assume that -F-justified revisions and justified revisions coincide for a lattice T. 
Let a, (3 G T. We will show that either a < (3 or (3 < a. Indeed, let P be annotated revision 
program consisting of the following rules. 

(in(a):a) <- (in(6):a V /?) and (in(6):/3) <- 

Let Bi be given by Bj{a) = (_l_, _L) and -B/(6) = (a, _L). Let i?i? be given by B R {a) = (a, _L) 

and B R (b) = (q V /?, _L). It is easy to see that i?R is a justified revision of Bj (with respect to 

P). By our assumption, B R is also an F-justified revision of Bj. There are only two possible 

cases. 

Case 1. a V (3 < a. Then, (3 < a. 

Case 2. aV^a Then, P^JBj = P. Let C = NC(Pg R \Bi). By the definition of the 

necessary change, 

By the definition of an F-justified revision, Pr = {Bj <S> —C) © C. From the facts that 
Br{o) = (a, _L) and Bj{a) = (J-,_L) it follows that C{a) = (a, _L). Therefore, it is the case 
that a V /3 < /3. That is, a < (3. 
(<=) Assume that lattice T is linear. Then, for any a, (3 €. T 

( _L, when a > /3 

\ /3 otherwise (when a < (3) 
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Let P be an annotated revision program. Let Bj and Br be any T 2 -valuations. Let us see 
what is the difference between Pb r \Bj and Pg \Bj. The first steps in the definitions of reduct 
and F-reduct are the same. During the second step of the definition of an F-reduct each 
annotated atom (l:/3) such that j3 < Bj(l) is deleted from bodies of rules. In the second step 
of the definition of the reduct such annotated atom is replaced by (fc-L). If (3 > Bj(l), then in 
the reduct Pb r \Bj annotated atom (l:/3) is replaced by (i.pcomp(Bi(l),/3)) = (/:/?), that is, it 
remains as it is. In the F-reduct, (/:/?) also remains in the bodies for /3 > Bj(l). Thus, the only 
difference between Pb r \Bi and Pg \Bj is that bodies of the rules from Pb r \Bj may contain 
atoms of the form (I : _L), where I € U, that are not present in the bodies of the corresponding 
rules in Pg \Bj. However, annotated atoms of the form (I : _L) are always satisfied. Therefore, 
the necessary changes of Pb r \Bj and PS\Bj, as well as justified and F-justified revisions of 
Bj coincide. □ 



Theorem 4.6 explains why the difference between the justified revisions and F-justified 



revisions is not seen when we limit our attention to revision programs as considered in | MT98 |. 
Namely, the lattice TWO = {f,t} of boolean values is linear. Similarly, the lattice of reals 
from the segment [0, 1] is linear, and there the differences cannot be seen either. 

5 Properties of justified revisions 

In this section we study basic properties of justified revisions. We show that key properties of 
justified revisions in the case of revision programs without annotations have their counterparts 
in the case of justified revisions of annotated revision programs. 



First, we observe that revision programs as defined in [MT95] can be encoded as annotated 
revision programs (with annotations taken from the lattice TWO = {f, t}). Namely, a revision 
rule 

p<r-qi,...q m 
(where p and all g^'s are revision atoms) can be encoded as 

(p:t) <- (q 1 :t),...,(q m :t) 

We will denote by P a the result of applying this transformation to a revision program P (rule 
by rule). Second, let us represent a set of atoms B by a TW0 2 -valuation B v as follows: 
B v (a) = (t,f), if a E B, and B v (a) = (f,t), otherwise. 



Fitting [ Fit95 | argued that under such encodings the semantics of F-justified revisions 



generalizes the semantics of justified revisions introduced in |MT95 |. Since for lattices whose 



ordering is linear the approach by Fitting and the approach presented in this paper coincide, 
and since the ordering of TWO is linear, the semantics of justified revisions discussed here 



extends the semantics of justified revisions from [MT95]. Specifically, we have the following 
result. 

Theorem 5.1 Let P be an ordinary revision program and let Bj and Br be two sets of atoms. 
Then, Br is a P -justified revision of Bj if and only if the necessary change of Pg V \BJ is 

R 

consistent and B R is a P a -justified revision of BJ . 

Before we study how properties of justified revisions generalize to the case with annotations, 
we prove the following auxiliary results. 
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Lemma 5.2 Let P be an annotated revision program. Let B be a T 2 -valuation. Then, 
NC(P B \B) =T b P {B). 

Proof. The assertion follows from definitions of a necessary change and operator T p . □ 

Lemma 5.3 Let P be an annotated revision program. Let Bi, Br, and C be T 2 -valuations, 
such that Br < Bj © C. Then, C satisfies the bodies of all rules in Pb r \Bj. 

Proof. Let r' € Pb r \Bj. Let (l.j) be an annotated revision atom from the body of r' . Let 
(8~ 1 (Bf))(l) = a. By the definition of the reduct, r' was obtained from some rule r E P, such 
that the body of r is satisfied by Br, and 7 = pcomp(a, /3), where (/:/?) is in the body of r. 
Since the body of r is satisfied by Br, we have j3 < (8^ 1 (Br))(1). From Br <& Bj © C it 
follows that 

{e-\B R ))(l)<(Q-\B I ®C))(l) = 

= {e-\Bj)){i) v {e-\c)){i) = a v {e-\c))(i). 

Combining this inequality with our previous observation that < (6~ 1 (Br))(1), we get < 
a V (0~ 1 (C))(/). By the definition of pcomp(a, (3), we get 7 < (6*~ 1 (C))(/). That is, C satisfies 
(/ : 7). Since (/ : 7) was arbitrary, C satisfies all annotated revision atoms in the body of r' . 
As r' was an arbitrary rule from Pr r \Bj, we conclude that C satisfies the bodies of all rules 
in PbJSj. □ 

Lemma 5.4 Let Br be a P '-justified revision of Bj. Then, NC(Pb r \Bj) = T p {Br). 

Proof. By the definition of a justified revision Br = (Bj <g> — C) © C, where C = NC(Pb r \Bj). 
Hence, Br < Bj © C. By Lemma |5.3| , C satisfies the bodies of all rules in Pb r \Bj. Since C is 
a model of Pb r \Bj, C satisfies all heads of clauses in Pb r \Bi. 

Let D be a valuation satisfying all heads of rules in Pb r \Bi. Then D is a model of Pb r \Bj. 
Since C is the least model of the reduct Pb r \Bi, we find that C <& D. Consequently, C is the 
least valuation that satisfies all heads of the rules in Pb r \Bi. The rules in Pb r are all those 
rules from P whose bodies are satisfied by Br. Thus, by the definition of the operator T p , 
C = T P (B R ). a 

We will now look at properties of the semantics of justified revisions. We will present a 
series of results generalizing properties of revision programs to the case with annotations. We 
will show that the concept of an s- model is a useful notion in the investigations of justified 
revisions of annotated programs. 

Our first result relates justified revisions to models and s-models. Let us recall that in the 
case of revision programs without annotations, justified revisions under a revision program P 
are models of P. In the case of annotated revision programs we have an analogous result. 

Theorem 5.5 Let P be an annotated revision program and let Bj and Br be T 2 -valuations. 
If Br is a P '-justified revision of Bj then Br is an s-model of P (and, hence, a model of P). 

Proof. By the definition of a P-justified revision, Br = (Bj © — C) © C, where C is the 
necessary change for Pb r \Bj. From Lemma |5.4| it follows that C = T p (Br). Therefore, 

Br = (Bj © -T P (B R )) © T P (B R ) < k -T P (B R ) © T P (B R ). 
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Also, 

B R = (Bj ® -T b P (B R )) © T b P (B R ) > T b P (B R ). 

Hence, B R is an s-model of P. □ 

In the previous section we showed an example demonstrating that P-justified revisions do 
not satisfy the property of invariance under joins. In contrast, justified revisions in the sense 
of our paper do have this property. 

Theorem 5.6 Let Pi be the result of simplification of an annotated revision program P\ by 
means of the join transformation. Then for every initial database Bj, P\-justified revisions of 
Bj coincide with P<i -justified revisions of Bj . 

The proof follows directly from the definition of P-justified revisions and from the following 
distributivity property of pseudo complement: pcomp(a, /3i)V pcomp(a, /%) = pcomp(a, [3i V/^)- 

In the case of revision programs without annotations, a model of a program P is its unique 
P-justified revision. In the case of programs with annotations, the situation is slightly more 
complicated. The next several results provide a complete description of justified revisions of 
models of annotated revision programs. First, we characterize those models that are their own 
justified revisions. This result provides additional support for the importance of the notion of 
an s-model in the study of annotated revision programs. 

Theorem 5.7 Let a T 2 -valuation Bj be a model of an annotated revision program P. Then, 
Bj is a P-justified revision of itself if and only if Bj is an s-model of P. 

Proof. Let us denote C = NC{P Rl \Bi). By the definition, Bj is a P-justified revision of itself 
if and only if Bj = (Bj ® —C) © C. Since Bj satisfies P, Theorem [O] implies that Bj >}, C. 
Thus, Bi © C = Bi. Distributivity of the product lattice T 2 implies that (P/ ® -C) © C = 
(P/ © C) ® (-C © C) = Bj ® (-C © C). Clearly, P 7 = P 7 ® (-C © C) if and only if 
Bi< k (-C®C). 

By Lemma |]| C = NC(P Bl \B I ) = T|,(P/). Thus, P/ is a P-justified revision of itself 
if and only if Bj <& T P (Bj) © (—T P (Bj)). But this latter condition is precisely the one that 
distinguishes s-models among models. Thus, under the assumptions of the theorem, Bj is a 
P-justified revision of itself if and only if it is an s-model of P. □ 

As we observed above, in the case of programs without annotations, models of a revision 
program are their own unique justified revisions. This property does not hold, in general, in the 
case of annotated revision programs. In other words, s-models, if they are inconsistent, may 



have other revisions besides themselves (by Theorem 5.7 they always are their own revisions). 
The following example shows that an inconsistent s-model may have no revisions other 
than itself, may have only one consistent justified revision, or may have incomparable (with 
respect to the knowledge ordering) consistent revisions. 

Example 5.8 Let the lattice of annotations be Ts pq \. Consider an inconsistent T 2 - valuation 
Bi such that Bi{a) = ({<?}, {<?}}• 

1. Consider annotated revision program P\ consisting of the clauses: 

(out(a):{q}) <— and (in(a):{q}) <— 
It is easy to see that Bj is an s-model of P\ and the only justified revision of itself. 
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2. Let an annotated revision program Pi consist of the clauses: 

(out (a):{q}) <— and (in(a):{q}) <— (in(a):{q}) 

Clearly, Bj is an s-model of Pi. Hence, Bj is its own justified revision (under Pi). 

However, Bj is not the only P2-justified revision of Bj. Consider the 7~ 2 -valuation Br 
such that B R (a) = (0, {q}). We have Pi Br \Bi = {(out(a):{q}) <— }. Let us denote the 
corresponding necessary change, NC(Pi Rr \Bj), by C. Then, C(a) = (0, {q}}- Hence, 
~ c = (M> fe q}) and {{Bi ® -C) © C)(«) = (0, U}) = B R (a). Consequently, B R is a 
P2-justified revision of Bj. It is the only consistent P2-justified revision of Bj. 

3. Let an annotated revision program P3 be the following: 

(in(a):{g» <- (in(a):{g» and (out(a):{g» «- (out(o):{g» 

Then, 5/ is s-model of P3 and its own i-3-justified revision. In addition, it is straightfor- 
ward to check that Bj has two consistent revisions Br and B' R , where B R (a) = (0, {q}) 
and B' R (a) = ({q},0}. The revisions Br and B' R are incomparable with respect to the 
knowledge ordering. □ 

The same behavior can be observed in the case of programs annotated with elements from 



other lattices. The following example is analogous to the second case in the Example |5.8| , but 
the lattice is ^[0,1] ■ 

Example 5.9 Let P be an annotated revision program (annotations belong to the lattice 
7j 01 ]) consisting of the rules: 

(out(o):l) <- and (in(a):0.4) <- (in(a):0.4) 

Let Bj be a valuation such that Bj(a) = (0.4, 1). Then, Bj is an s-model of P and, hence, it 
is its own P-justified revision. Consider a valuation Br such that Br(o) = (0,1). We have 
Pb r \B[ = {(out(a):l) <— }. Let us denote the necessary change NC(Pb r \Bj) by C. Then 
C(a) = (0, 1) and -C = (0, 1). Thus, ((£/ <g> -C) C)(a) = (0, 1) = B R (a). That is, B R is a 
P-justified revision of Bj. □ 

Note that in both examples the additional justified revision B R of Bj is smaller than Bj 
with respect to the ordering </,. It is not coincidental as demonstrated by our next result. 

Theorem 5.10 Let Bj be a model of an annotated revision program P. Let B R be a P-justified 
revision of Bj. Then, B R <k Bj. 

Proof. By the definition of a P-justified revision, B R = (Bj <8> — C) © C, where C is the 
necessary change of P Rr \Bj. By the definition of the reduct P Rr \Bi and the fact that Bj is 
a model of P, it follows that Bj is a model of Pb r \Bj. The necessary change C is the least 
fixpoint of Tp | B , therefore, C < Bj. Hence, 

B R = (B I ®-C)®C< k B I ®C< k B I ®B I = B I . □ 

Finally, we observe that if a consistent T 2 -valuation is a model (or an s-model; these notions 
coincide in the class of consistent valuations) of a program then it is its unique justified revision. 
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Theorem 5.11 Let Bj be a consistent model of an annotated revision program P. Then, Bj 
is the only P '-justified revision of itself. 



Proof. Theorem |3.4| implies that Bj is an s-model of P. Then, from Theorem |5.7| we get 
that Bj is a P-justified revision of itself. We need to show that there are no other P-justified 
revisions of Bj. 



Let Br be a P-justified revision of Bj. Then, Br < k Bj (Theorem 5.10). Therefore 



T P (B R ) < k T%(Bi). Hence, -T b P (Bj) < k -T P (B R ). Theorem PI implies that Bj > k T b P (Bi). 
Thus, —Bj < k —Tp(Bj). Since Bj is consistent, Bj < k —Bj. Combining the above inequali- 
ties, we get 

Bj <k ~Bi <k -Tp(Bj) < k -Tp(Bji). 

That is, Bj < k -T b P {B R ). Hence, Bj g> -T b P {B R ) = Bj. 
From definition of justified revision and Lemma |~~ 



B R = (Bj -T b P (B R )) © T P (B R ) = Bj® T b P (B R ) > k Bj. 

Therefore, B R = Bj. □ 

To summarize, when we consider inconsistent valuations (they appear naturally, especially 
when we measure beliefs of groups of independent experts), we encounter an interesting phe- 
nomenon. An inconsistent valuation Bj, even when it is an s-model of a program, may have 
different justified revisions. However, all these additional revisions must be <fc-less inconsistent 
than Bj. In the case of consistent models this phenomenon does not occur. If a valuation B 
is consistent and satisfies P then it is its unique P-justified revision. 



In [MT98| we proved that, in the case of ordinary revision programs, "additional evidence 
does not destroy justified revisions". More precisely, we proved that if B R is a P-justified 
revision of Bj and B R is a model of P' then B R is a P U P'-justified revision of Bj. We 
will now prove a generalization of this property to the case of annotated revision programs. 
However, as before, we need to replace the notion of a model with that of an s-model. 

Theorem 5.12 Let P, P' be annotated revision programs. Let B R be a P-justified revision of 
Bj. Let B R be an s-model of P' . Then, B R is a P U P'-justified revision of Bj. 

Proof. Let C = NC{P Br \Bj). Let C = NC((P U P') Br \Bj). Clearly, C < C . By the 
definition of a justified revision B R = (Bj <g) — C) © C. Hence, 

B R <Bi®C <Bi® C. 



By Lemma 5.3 it follows that C satisfies the bodies of all rules in (P U P')b r \Bj. Since C is 
the necessary change of (P U P')b r \Bj we conclude that C satisfies the heads of all rules in 
(P U P')b r \Bj. Reasoning as in the proof of Lemma 5A we find that C = Tp uP ,(B R ). 



By Theorem |5.5|, B R is an s-model of P. Therefore, by Theorem p.5|, B R is a s-model of 



P U P' . Theorem 5.7 implies that B R is a P U P'-justified revision of itself. In other words, 

B R = (B R -NC((P U P')b r \Br)) © NC((P U P')b r \Br). 
From Lemma |J it follows that NC((P U P') Br \Br) = T b pyjp ,(B R ). Hence, 

Br = (Br ® -C) © C. 
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Next, let us recall that B R = (P/ © -C) © C. Hence, 

B R = (((Br © -C) © C) © -C) © C. 

Now, using the facts that C <C and — C" < — C, we get the following equalities: 

B R = (((B 7 © -C) © C) © -C") © C" = 

= ((S 7 © -C) © -C") © (C © -C") © C = 

= (Pj © (-C © -C")) © C" = (P/ © -C") © c" 

Thus, P# = (5/ © — C") © C". By the definition of justified revisions, .Br is a P U P'-justified 
revision of P/. □ 

In case of revision programs without annotations, justified revisions satisfy the minimality 
principle (see [ |MT98| ]). Namely, P-justified revisions of a database differ from the database 
by as little as possible. Recall, that in the case of revision programs without annotations, 
databases are sets of atoms, and the difference between databases R and I is their symmetric 
difference P 4- I = (P \ I) U (I \ R). The minimality principle states that if R is a P-justified 
revision of /, then, R -j- 1 is minimal in the family {B -j- / : B is a model of P} (Theorem 3.6 
in fMT9J ). 



Before generalizing the minimality principle to the case of annotated revision programs we 
need to specify what we mean by the difference between T 2 -valuations. 

Definition 5.13 Let R, B be T 2 -valuations. We say that B can be transformed into R via 
a T 2 -valuation C if R = (B © — C) © C . We say that B can be transformed into R if there 
exists T 2 -valuation C such that B can be transformed into R via C . 

Given two T 2 -valuations, it is not necessarily the case that one of them can be transformed 
into the other. Indeed, let Vj be a T 2 -valuation that assigns to each atom annotation T. Let 
Vj_ be a T 2 -valuation that assigns to each atom annotation _L. Then, if a lattice consists of 
more than one element, then we have T/l, and Vj cannot be transformed into V±. 

Definition 5.14 Let R, B be T 2 -valuations. Let S = {C \ B can be transformed into R via 
C}. The difference diff(R,B) is 

d lff {R,B) = \^ Wh " nS + \ a fll 

v ' [Vy otherwise (when S = to). 

The following lemma describes a useful property of a difference between T 2 -valuations. 
Namely, the difference between T 2 -valuations R and B is the least (in <^ ordering) T 2 - 
valuation among all C such that R = (B © —C) © C. 

Lemma 5.15 Let R, B be T 2 -valuations. Let S = {C \ B can be transformed into R via C}. 
7/5/0, then diff(R, B) £ S. 
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Proof. Let S = {C \ B can be transformed into R via C} 7^ 0. Then, diff(i?, B) =\\S. First, 
let us show that - T7 S = E{~C : C G S}. On the one hand, n S < C for all C G S. Thus, 
- II S > -C for all C eS. Hence, 

-nS>EK:CeS}. (8) 

On the other hand, £{-C :Ce5}>-C for all C e S. Thus, - £{-C : C G 5} < C for 
all CeS. Hence, - E{~C :CeS}<l\S. That is, 

-£{-C:CeS}>-l[S. (9) 

From (§) and (|) it follows that - U S = £{-C : C e S}. 

Since T is complete and infinitely distributive, we get the following. 

(B®-Y[S)®Y[S = (B® Y,{~ C -CeS})(BY[S = 

= Y,{(B®-C):CeS}®l[S = 

= 1[{Y,{( B ®-C):CeS}®C : C" G 5} > 

> IlK 5 ® - c/ ) ®C :C eS} = ~[[{R} = R. 
That is, 

(s^-n^ell 5 ^^- ( 10 ) 

By definition of S, for each C G S, R = (B ® -C) © C. Therefore, for each C £S,C <R 
and B <g> -C < i?. Thus, n S < i? and 

B®-n^ = 5® X){-C : C e S} = Y,i( B ®-C):C £ S} < R. 

Hence, (B <g> - J] 5 1 ) © II -5 < R- This together with (|10|) imply that 

(B ® - J] 5) © J] 5 = fl. 

That is, n -5 e 5. □ 

Now we will show that the minimality principle can be generalized to the case of annotated 

revision programs. We will have, however, to assume that T is a Boolean algebra and restrict 

ourselves to consistent T 2 -valuations. 

Let T be a Boolean algebra with De Morgan complement being the complement. Let us 

define the negation operation on T 2 as ->(a,(3) = (a, (3) (a, (3 G T). Then, the lattice T 2 

with operations ffi, ©, -1, and elements _L, T is a Boolean algebra, too. Operations on T 2 lift 

pointwise to the space of T 2 -valuations. It is easy to see that the space of T 2 -valuations with 

operations ffi, <g), ->, and elements V±, Vj is again a Boolean algebra. 

Lemma 5.16 Let T be a Boolean algebra. Let R, B, I be T 2 -valuations. Let R and L be 
consistent. Let diff(R, B) < k diff{R, L). Then, R®B > k R®L. 



22 



Proof. Let C = diS(R,I), C = dSS(R,B). Since I is consistent, / < k -I. Thus, 

I ® -(--/) <fc -/ ® -(--I) = -(/ ->J) = -F T = VI (11) 

Since i? is consistent, C is consistent, too. That is, C < k —C. Hence, 

I®-C = (I®-C)ffi(I<g>C) (12) 

Consider valuation C ® ->I. Using (11) and fli"2] ) we get: 



(/ ® ~(C (2) -.J)) © (C ® -.J) = (I ® (-C © -(-.J))) © (C © -.J) = 

= (I ® -C) © (J ® -(-.J)) © (C ® -.J) = (I ® -C) © (J ® C) © V± © (C ® -,/) = 

= (/ ® -C) © (/ ® C) © (C ® -J) = (I ® -C) © (<7 ® (I © -.1)) = 

= (J ® -C) © (C ® Vt) = (I ® -C) © C = R. 

Consequently, C < k C ® -J (by definition of diff(i?, J)). Hence, C ® J < fc C ® -ij ® J = V±. 
That is, C ® I = V±. Since C" < C, it follows that C" ® I = V±. We have: 7 ® -C < k R = 
(B ® -C") © C". Thus, 

I ® -<7 = (I <g> -C) ® I < fc {{B ® -C") © C") ® / = ((£ ® -C) ® /) © (C ® /) = 

= ((S -C") ® J) © Kl = (-B ® -C") ® ^ <fe 5 ® -C". 

That is, 

/ ® -C < fc S ® -C". (13) 

Since i? is consistent, C" is consistent, too. It means that C" <& — C". Hence, -B ® —C > k 
B®C. Therefore, 

R®B = {{B® -C) © C") ® S = ((5 ® -C") ® B) © (C ® B) = 

= {B® -C) ®{B®C') = B® -C. 

That is, 

R®B = B®-C'. (14) 

Similarly, 

R®I = I®-C. (15) 



Combining (0), (0), and @ we get i?® J < fc i?® 5. □ 

If T is no£ a Boolean algebra, then the statement of the above lemma does not necessarily 
hold, as illustrated by the following example. 

Example 5.17 Let T = T [0}1] , U = {a}. Let R(a) = (0.3,0.7), B(a) = (0.2,0.5), and 
1(a) = (0.1,0.6). Clearly, R and I are consistent. It is easy to see that (diff(R, B))(a) = 
(diff(.R, J))(a) = (0.3,0.7). Hence, diS(R,B) < k dift(R,I). However, R®B£ k R®I. Indeed, 
(R ® B)(a) = (0.2, 0.5), and (R ® I)(a) = (0.1, 0.6). □ 
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Theorem 5.18 Let T be a Boolean algebra. Let R be a consistent P '-justified revision of a 
consistent I. Let C = diff(R,I). Let B be such that diff(R,B) = C < k C. Then, R is a 
P -justified revision of B. 

Proof. Consider two reducts Pr\L and Pr\B. Let r' € Pr. Let (/:/?) be an annotated revision 
atom from the body of r' . Let (Q-\I))i$) = 8 h (fl- 1 (B))(Z) = 5 B , and (0- 1 (i?))(/) = Sr. By 
the definition of a reduct, the corresponding rule in Pr\I contains in the body the annotated 
revision literal (l:ji), where 7/ = pcomp{5 1 , f3) . The corresponding rule in Pr\B contains in 
the body the annotated revision literal (I-'Jb), where 75 = pcomp{8 b , ft) • By the definition of 
pseudocomp lenient , 

Si V 7/ > (3. (16) 

Since r' € Pr, (3 < 6r. Hence, (3 A 5r = (3. Also, from the definition of pcomp we get 77 < (3, 



which implies 7/ A 5r = 77. From (|16|) we get 

(diVn)A6 R >l3A8R. 

That is, 

(5! A 5 R ) V 7/ > (3. 



From Lemma 5.1C it follows that 5r A 5r > 5j A 5r. Therefore, 

Sb V 7/ > (Sb A 5 r ) V 7/ > 0. 

From definition of pcomp(5B,(3) it follows that 7b < 7/. This means that the only difference 
between reducts Pr\I and Pr\B is that annotations of literals in the bodies of rules from Pr\B 
are less than annotations of corresponding literals in Pr\I. Consequently, NC(Pr\B) >& 

NC(P R \L). 

Since R is consistent, 

C <k C < k NC(P R \L) < k NC(P R \B) < k R < k 

< k -r < k -nc(p r \b) < k -c < k -a. 

Also, R= (B® -C) C" implies that B g> -C < k R, and B C > k R. Then, on one hand, 

(B (8) -NC{P R \B)) NC(P R \B) < k (B O -C) (BR< k R(BR = R. 

On the other hand, 

(B ® -NC(P R \B)) NC(Pr\B) = (B(B NC(P r \B)) -NC{P R \B) > k 

> k {B @ C) ® R> k R® R = R. 
Therefore, (B <g> -NC(P R \B)) NC(P R \B) = R. That is, R is a P-justified revision of P. □ 

Theorem 5.19 Let T be a Boolean algebra. Let R be a consistent P-justified revision of a 
consistent L. Then, dijf(R,L) is minimal in the family {diff(B,L) : B is a consistent model 
ofP}- 
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Proof. Let C = diff(P, I). Then, R = (J® — C) ©C. Since P is consistent, C is also consistent. 
That is, C <k —C. Let B be a consistent model of P, and let diff(P,I) = C <k C. We have 
B = (I ® -C") C". Inequality C" < fc C implies C" < fe C < fe -C < fc -C". Therefore, 

{b®-c)®c = (((/ © -c") e C) ®-c)®c = 
= (/ © -C -c) © (C (8i -c) e c = (i ® -c) © C © c = 

= (I®-C)®C = R. 
Consequently, diff(P, B) <& C. By Theorem |5.18|, R is a P-justified revision of B. However, 



B is a consistent model of P. By Theorem 5.11, B is the only P-justified revision of itself. 



Therefore, R = B. □ 

The condition in the above theorem that revision is consistent is important. For inconsistent 
revisions the minimality principle does not hold, as shown in the following example. 

Example 5.20 Let T = T{ p \ with the De Morgan complement being the set-theoretic com- 
plement. Let P be an annotated revision program consisting of the following rules: 

(in(a):{p» <- 
(out(o):{p» «- (out(o):{p» 

Let 1(a) = (0,{p})- Clearly, I is consistent. Let Pi (a) = ({p},{p}} and P 2 (a) = ({p},0)- 
Both Pi and P2 are P-justified revisions of I. Thus, Pi is inconsistent s-model of P, and 
P 2 is consistent model of P. We have: diff(Pi,I) = (M,M), and diff(P 2 ,I) = ({p},0>. 
Clearly, diff(P2,/) <k diff(Pi,7). Therefore, Pi is a P-justified revision of a consistent /, but 
diff(Pi,I) is not minimal in the family {diff(P,I) : B is a consistent model of P}. □ 

6 An alternative way of describing annotated revision pro- 
grams and order isomorphism theorem 

We will now provide an alternative description of annotated revision programs. Instead of 
evaluating separately revision atoms in T we will evaluate atoms in T 2 . This alternative 
presentation will allow us to obtain a result on the preservation of justified revisions under 
order isomorphisms of T 2 . This result is a generalization of the "shifting theorem" of [MPT99|. 

An expression of the form a: (a, /3), where (a, j3) € T 2 , will be called an annotated atom 
(thus, annotated atoms are not annotated revision atoms). Intuitively, an atom a:(a,(5) stands 
for the conjunction of (in(a):a) and (out(a):/3). An annotated rule is an expression of the 
form p <— q\, . . . , q n where p, q\, . . . , q n are annotated atoms. An annotated program is a set of 
annotated rules. 

A T 2 -valuation B satisfies an annotated atom a:{a,{3) if (a, (3) <& B(a). This notion of 
satisfaction can be extended to annotated rules and annotated programs. 

We will now define the notions of reduct, necessary change and justified revision for the new 
kind of programs. Let P be an annotated program. Let Bj and Br be two 7" 2 -valuations. The 
reduct of a program P with respect to two valuations Bj and Pr is defined in a manner similar 



to Definition [Oj. Specifically, we leave only the rules with bodies that are satisfied by P#, and 
in the remaining rules we reduce the annotated atoms (except that now the transformation 9 
is no longer needed!). 
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Definition 6.1 The reduct Pb r \Bj is obtained from P by 

1. removing every rule whose body contains an annotated atom that is not satisfied in Br, 

2. replacing each annotated atom l:/3 from the body of each remaining rule by the annotated 
atom Ivy, where 7 = pcomp(B[(l), (3) (here ft 7 £ T 2 ). 

Next, we compute the least fixpoint of the operator associated with the reduced program. 



Finally, as in Definition 4.2, we define the concept of justified revision of a valuation Bj with 



respect to a revision program P. 

Definition 6.2 Br is a P-justified revision of Bj if Br = (Bj —C) C , where C = 
NC(Pb r \Bj) is the necessary change for Pb r \Bj. 

It turns out that this new syntax does not lead to a new notion of justified revision. Since 
we talk about two different syntaxes, we will use the term "old syntax" to denote the revision 
programs as defined in Section ||, and "new syntax" to describe programs introduced in this 
section. Specifically we now exhibit two mappings. The first of them, tr\, assigns to each "old" 
in-rule 

(in(a):a) <- (in(&i):ai), . . . , (in(b m ):a m ) , (out(si):ft), . . . , (out(s n ):ft), 

a "new" rule 

a:(a, _L) <- &i:(ai, _L), . . . , b m :(a m , _L), si:(_L, ft), ... , s„:(J_, ft). 

An "old" out-rule 

(out (a):/?) 4- (in(6i):ai), . . . , (in(6 m ):a m ), (out(si):ft), . . . , (out(s n ):ft) 

is encoded in analogous way: 

a:(_L, (3) *- h:{ai, 1), . . . , b m :{a m , _L), si:{±, ft), ... , s n :(_L, ft). 

Translation tr2, in the other direction, replaces a "new" revision rule by one in-rule and one 
out-rule. Specifically, a "new" rule 

a:(a,(3) <- ai:{ai,ft), . . . ,a n :(a n ,ft) 

is replaced by two "old" rules (with identical bodies but different heads) 

(in(a):a) <- (in(ai):ai), (out(a):ft), . . . , (in(a n ):a n ), (out(a n ):ft) 

and 

(out(a):ft <- (in(ai):ai), (out(a):ft), . . . , (in(a n ):a n ), (out(a n ):ft). 

The translations tr\ and tr<i can be extended to programs. We then have the following theorem 
that states that the new syntax and semantics of annotated revision programs presented in 
this section are equivalent to the syntax and semantics introduced and studied earlier in the 
paper. 
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Theorem 6.3 Both transformations tr\, and tr<i 'preserve justified revisions. That is, if 
Bj,Br are valuations in T 2 and P is a program in the "old" syntax, then Br is a P '-justified 
revision of Bj if and only if Br is a tr\{P) -justified revision of Bj. Similarly, if Bj,Br are 
valuations in T 2 and P is a program in the "new" syntax, then Br is a P-justified revision of 
Bj if and only if Br is a tr2(P) -justified revision of Bj. 



In the case of unannotated revision programs, the shifting theorem proved in [MPT99| 



shows that for every revision program P and every two initial databases B and B' there 
is a revision program P' such that there is a one-to-one correspondence between P-justified 
revisions of B and P'-justified revisions of B' . In particular, it follows that the study of justified 
revisions (for unannotated programs) can be reduced to the study of justified revisions of empty 
databases. We will now present a counterpart of this result for annotated revision programs. 
The situation here is more complex. It is no longer true that a T 2 -valuation can be "shifted" 
to any other T 2 -valuation. However, the shift is possible if the two valuations are related to 
each other by an order isomorphism of the lattice of all T 2 - valuations. 

There are many examples of order isomorphisms on the lattice of T 2 . For instance, the 
mapping ip : T 2 — > T 2 defined by ip({a,(3)) = {(3, a) is an order isomorphism of T 2 . In the 
case of the lattice Tx, order isomorphisms of T x can also be generated by permutations of the 
set X. 

Let tp be an order isomorphism on T 2 . It can be extended to annotated atoms, annotated 
rules, and T 2 - valuations as follows: 
ip(a : 5) = a : ip(S), 

ip(a:5 <- ar-Si,--- ,a n :5 n ) = ip{a:5) <- ip(ar.5i), . . . ,ip(a n :8 n ), 
(V(£))(a)=V(£(a)), 
where a, a\, . . . , a n E U, S,6i,...,6 n G T 2 , and B is a T 2 -valuation. 

The extension of an order isomorphism on T 2 to T 2 -valuations is again an order isomor- 
phism, this time on the lattice of all T 2 -valuations. We say that an order isomorphism ip on a 
lattice preserves conflation if tp{—5) = —ip{5) for all elements 8 from the lattice. We now have 



the following result that generalizes the shifting theorem of [MPT99|. 



Theorem 6.4 Let ip be an order isomorphism on the set of T 2 -valuations. Let ip preserve 
conflation. Then, Br is a P-justified revision of Bj if and only if i/j(Br) is a ip(P) -justified 
revision oftp(Bj). 

Proof. By definition, Br is a P-justified revision of Bj if and only if Br = (P/®— C)©C, where 
C = NC(Pb r \Bj). Since Tp is an order isomorphism, it preserves meet and join operations. 
Therefore, 

tP{B r ) = iP((Bi <g> -C) ®C) = tP(Bj <g> -C) © tP(C) = 

= (v(Pj) ® V-(-c)) e V(C) = {${Bi) ® -V(C)) e ip(C). 

At the same time, ^(P Bfl |B/) = (^(P)^)!^/), and ATC(^(P Bb |Pj)) = tP(NC(P Br \Bj)). 
Thus, Br is a P-justified revision of Bj if and only if tP(Br) is a ^(P)-justified revision of 
tP(Bj). a 



Shifting theorem of [MPT9E ] , that applies to ordinary revision programs, is just a particular 



case of Theorem 6.4. In order to derive it from Theorem 6.4, we take T = TWO. Next, we 



consider an ordinary revision program P and two databases B\ and P2 (let us recall that in 
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the case of ordinary revision programs, databases are sets of atoms and not valuations). Let 
P a and B\ and B^ be defined as in Theorem |5.1j It is easy to see that the operator ip, defined 

by 

{(3, a), when B\{a) / B%(a) 



0/>(v))(a) | ^ p^ when B v^ = B ^ , 

is an order- isomorphism on TWO -valuations and that ifj{B\) = B\- Let C\ and C2 be two 
sets of atoms such that C^ = ifi(Cf). By Theorem |6.4| , Cf is a P a -justified revision of B\ if 



and only if CJ is a ip(P a )-justified revision of B\- Theorem 5.1 and the observation that the 
necessary change of Pq V \B\ is consistent if and only if the necessary change of ip{P a )c v \B^ is 
consistent together imply now the shifting theorem of [MPT9E]. 



The requirement in Theorem p.4j that ifi preserves conflation is essential. If it is not the 
case, the statement of the theorem may not hold as illustrated by the following example. 

Example 6.5 Let T = Tr pqr -i with the De Morgan complement defined as follows: 

{} = {p, q, r}, {p} = {p, r}, {q} = {q, r}, {r} = {p, q}, 

{P, Q, r} = {}, {p, r} = {p}, {q, r} = {q}, {p, q} = {r}. 

Let ip be order isomorphism on T such that ip({p}) = {p}, ip({q}) = {r}, and ip({r}) = {q}. 
Clearly, ip does not preserve conflation, because 

~>P(-({p}, {})) = i>{{{P, <?> r l> {P> r })) = (fe 9, r}, {p, q}), but 

-V>«M,{}» = -({P},{}) = ({p,q,r},{P,r})- 
Let an annotated program be the following: 

P: a:({p},{}) - 

It determines the necessary change C(a) = ({p},{})- 

Then, —C(a) = ({p, q,r}, {p, r}). Let Bi(a) = ({},{r}}- The P-justified revision of Bj is 
B R (a) = (({}, {r}} (8 ({p, q, r}, {p, r}}) ({p}, {}) = ({p}, {r}). 

The annotated program ip(P) is the same as P. We have ip(Bi)(a) = {{}, {q}), ip(Bn)(a) = 
{{p},{q})- The reduct (tp(P))^,^ BR ^(Bf) = ip(P) = P. The necessary change determined by 
the reduct is C. However, 

(WBj) ® -C) C)(a) = (M, {}} + tl>(B R )(a). 

Therefore, ip(Bn) is not a ^(P)-justified revision of tp{Bj). □ 

7 Conclusions and further research 

The main contribution of our paper is a new definition of the reduct (and hence of a justified 



revision) for annotated programs considered by Fitting in [Fit95|. This new definition elimi- 
nates some anomalies arising in the approach by Fitting. Specifically, in Fitting's approach, 
justified revisions are not, in general, models of a program. In addition, they do not satisfy the 
invar iance-under-join property. In our approach, both properties hold. Moreover, as we show 
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in Sections || and ^, many key properties of ordinary revision programs extend to the case of 
annotated revision programs under our definition of justified revisions. 

Several research topics need to be further pursued. First, the concepts of an annotated 
revision program and of a justified revision can be generalized to the disjunctive case, where a 
program may have "nonstandard disjunctions" in the head. One can show that this extension 
indeed reduces back to the ordinary concept of annotated revision programming, as discussed 
here, if no rule of a program contains a disjunction in its head. However, an in-depth study of 
annotated disjunctive revision programming has yet to be conducted. 

Second, in this paper we focused on the case when the lattice of annotations is distributive. 
This assumption can be dropped and a reasonable notion of a justified revision can still be 
defined. However, the corresponding theory is so far less understood and it seems to be much 
less regular than the one studied in this paper. 

Finally, we did not study here the complexity of reasoning tasks for annotated revision 
programs. Assuming that the lattice is finite and fixed (is not part of the input), the complexity 
results obtained in [MT98| can be extended to the annotated case. The complexity of reasoning 



tasks when the lattice of annotations is a part of an input still needs to be studied. Clearly, 
any such study would have to take into account the complexity of evaluating lattice operations. 
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